Windows TCP/IP Elevation of Privilege Vulnerability

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

Windows TCP/IP Elevation of Privilege Vulnerability

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

kernel: vxlan: do not reuse cached ip_hdr() value after skb_tunnel_check_pmtu()

A flaw was found in the Linux kernel's Virtual Extensible LAN VXLAN module. This vulnerability occurs because a cached IP header pointer is improperly reused after a Path Maximum Transmission Unit PMTU check. When the packet's head is modified during the PMTU check, the old cached IP header point...

CareCam Pro IP Cameras

ADVISORY SUMMARY Successful exploitation of this vulnerability could allow an attacker to take full control of the device. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability. Minimize network exposure for all control...

ip-address: ip-address: Inconsistent IP address parsing leads to Server-Side Request Forgery (SSRF) and trust-boundary bypass

A flaw was found in the ip-address library. This library incorrectly interprets IPv4 address octets with leading zeros as decimal, while standard network parsers interpret them as octal. This inconsistency can cause applications to misclassify network targets, allowing a remote attacker to bypass...

PT-2026-87423

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-87724

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

PT-2026-87892

Name of the Vulnerable Software and Affected Versions IP Helper affected versions not specified Description A use after free issue in IP Helper allows an unauthorized attacker to execute arbitrary code over a network, which can affect the system. Use after free is a memory corruption flaw that...

PT-2026-87697

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A use-after-free condition in Windows TCP/IP allows an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

PT-2026-87439

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A race condition occurs in Windows TCP/IP due to improper synchronization when using a shared resource. This allows an authorized attacker to elevate privileges locally. A race conditi...

PT-2026-87591

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...

PT-2026-87190

InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery SSRF vulnerability in the file upload functionality system/core/uploader.php at lines 509-532. When the "upload from URL" feature follows an HTTP redirect, the redirected...

CVE-2026-69761: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-72981: Use After Free

Use after free in IP Helper allows an unauthorized attacker to execute code over a network...

CVE-2026-69757: Use After Free

Use after free in Windows TCP/IP allows an authorized attacker to elevate privileges over a network...

CVE-2026-69404: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

CVE-2026-69793: Improper Validation of Consistency within Input

Improper validation of consistency within input in Windows TCP/IP allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-69385: Concurrent Execution using Shared Resource with Improper Synchronization

Concurrent execution using shared resource with improper synchronization 'race condition' in Windows TCP/IP allows an authorized attacker to elevate privileges locally...

PT-2026-87701

Name of the Vulnerable Software and Affected Versions Windows TCP/IP affected versions not specified Description A use-after-free condition in Windows TCP/IP enables an authorized attacker to elevate privileges over a network. Use-after-free is a memory corruption issue that occurs when an...

CVE-2026-69588: Missing Release of Memory after Effective Lifetime

Missing release of memory after effective lifetime in Windows TCP/IP allows an unauthorized attacker to deny service over a network...